Heap-Based Buffer Over-read in CImg Library Affects Image Processing Applications
CVE-2018-7638

7.8HIGH

Key Information:

Vendor: Cimg
Status: Cimg
Vendor: CVE Published:; 2 March 2018

What is CVE-2018-7638?

A heap-based buffer over-read vulnerability exists in the CImg library version 220 when processing specially crafted BMP images. This issue arises specifically during the loading of 256-color BMP files, where improper handling can lead to potential security risks in applications relying on the library for image processing. Users and developers are urged to implement necessary patches to safeguard against potential exploitation.